[root@ceshi-128 ~]# tar -xf zookeeper-3.4.14.tar.gz -C /usr/local/ [root@ceshi-128 ~]# cd /usr/local/ [root@ceshi-128 local]# ln -s /usr/local/zookeeper-3.4.14/ /usr/local/zookeeper [root@ceshi-128 conf]# pwd /usr/local/zookeeper/conf [root@ceshi-128 conf]# cp zoo_sample.cfg zoo.cfg 配置参数 [root@ceshi-128 conf]# vi zoo.cfg # The number of milliseconds of each tick tickTime=2000 # The number of ticks that the initial # synchronization phase can take initLimit=10 # The number of ticks that can pass between # sending a request and getting an acknowledgement syncLimit=5 # the directory where the snapshot is stored. # do not use /tmp for storage, /tmp here is just # example sakes. dataDir=/data/zookeeper/data dataLogDir=/data/zookeeper/logs # the port at which the clients will connect clientPort=2181 server.1=zk1.od.com:2888:3888 server.2=zk2.od.com:2888:3888 server.3=zk3.od.com:2888:3888
[root@ceshi-128 conf]# vi /data/zookeeper/data/myid 1 [root@ceshi-129 conf]# vi /data/zookeeper/data/myid 2 [root@ceshi-130 conf]# vi /data/zookeeper/data/myid 3 [root@ceshi-128 bin]# /usr/local/zookeeper/bin/zkServer.sh start ZooKeeper JMX enabled by default Using config: /usr/local/zookeeper/bin/../conf/zoo.cfg Starting zookeeper ... STARTED [root@ceshi-128 bin]# netstat -tnlp | grep 2181 tcp 0 0 0.0.0.0:2181 0.0.0.0:* LISTEN 55304/java
130节点为master [root@ceshi-130 bin]# ./zkServer.sh status ZooKeeper JMX enabled by default Using config: /usr/local/zookeeper/bin/../conf/zoo.cfg Mode: leader
[root@ceshi-132 ~]# ssh-keygen -t rsa -b 2048 -C "liu_jiangxu@163.com" -N "" -f /root/.ssh/id_rsa Generating public/private rsa key pair. Your identification has been saved in /root/.ssh/id_rsa. Your public key has been saved in /root/.ssh/id_rsa.pub. The key fingerprint is: SHA256:jo0UhlYUk+xszsNIpHt64iUvasvyWSzTaZAE7Xhcfd4 liu_jiangxu@163.com The key's randomart image is: +---[RSA 2048]----+ |.. +=o | | .. oo+.. | |o.+X. | |+*=+. | +----[SHA256]-----+
[root@ceshi-132 ~]# mkdir -p /data/dockerfile/jenkins/ [root@ceshi-132 jenkins]# vi Dockerfile 获取jenkins镜像 FROM harbor.od.com/public/jenkins:v2.222.4 使用root用户执行 USER root 拷贝时区到容器 RUN /bin/cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime &&\ echo 'Asia/Shanghai' >/etc/timezone 添加密钥文件到容器 ADD id_rsa /root/.ssh/id_rsa 加入登陆私有仓库文件 ADD config.json /root/.docker/config.json 安装docker客户端 ADD get-docker.sh /get-docker.sh 修改ssh客户端认证 RUN echo " StrictHostKeyChecking no" >> /etc/ssh/ssh_config &&\ /get-docker.sh
# This script is meant for quick & easy install via: # $ curl -fsSL get.docker.com -o get-docker.sh # $ sh get-docker.sh # # For test builds (ie. release candidates): # $ curl -fsSL test.docker.com -o test-docker.sh # $ sh test-docker.sh # # NOTE: Make sure to verify the contents of the script # you downloaded matches the contents of install.sh # located at https://github.com/docker/docker-install # before executing. # # Git commit from https://github.com/docker/docker-install when # the script was uploaded (Should only be modified by upload job): SCRIPT_COMMIT_SHA=e749601
# This value will automatically get changed for: # * edge # * test # * experimental DEFAULT_CHANNEL_VALUE="edge" if [ -z"$CHANNEL" ]; then CHANNEL=$DEFAULT_CHANNEL_VALUE fi
DEFAULT_DOWNLOAD_URL="https://download.docker.com" if [ -z"$DOWNLOAD_URL" ]; then DOWNLOAD_URL=$DEFAULT_DOWNLOAD_URL fi
is_dry_run() { if [ -z"$DRY_RUN" ]; then return1 else return0 fi }
deprecation_notice() { distro=$1 date=$2 echo echo"DEPRECATION WARNING:" echo" The distribution, $distro, will no longer be supported in this script as of $date." echo" If you feel this is a mistake please submit an issue at https://github.com/docker/docker-install/issues/new" echo sleep10 }
get_distribution() { lsb_dist="" # Every system that we officially support has /etc/os-release if [ -r /etc/os-release ]; then lsb_dist="$(. /etc/os-release && echo "$ID")" fi # Returning an empty string here should be alright since the # case statements don't act unless you provide an actual value echo"$lsb_dist" }
add_debian_backport_repo() { debian_version="$1" backports="deb http://ftp.debian.org/debian $debian_version-backports main" if ! grep -Fxq"$backports" /etc/apt/sources.list; then (set -x; $sh_c"echo \"$backports\" >> /etc/apt/sources.list") fi }
echo_docker_as_nonroot() { ifis_dry_run; then return fi ifcommand_existsdocker && [ -e /var/run/docker.sock ]; then ( set -x $sh_c'docker version' ) || true fi your_user=your-user [ "$user" != 'root' ] && your_user="$user" # intentionally mixed spaces and tabs here -- tabs are stripped by "<<-EOF", spaces are kept in the output echo"If you would like to use Docker as a non-root user, you should now consider" echo"adding your user to the \"docker\" group with something like:" echo echo" sudo usermod -aG docker $your_user" echo echo"Remember that you will have to log out and back in for this to take effect!" echo echo"WARNING: Adding a user to the \"docker\" group will grant the ability to run" echo" containers which can be used to obtain root privileges on the" echo" docker host." echo" Refer to https://docs.docker.com/engine/security/security/#docker-daemon-attack-surface" echo" for more information."
}
# Check if this is a forked Linux distro check_forked() {
# Check for lsb_release command existence, it usually exists in forked distros ifcommand_existslsb_release; then # Check if the `-u` option is supported set +e lsb_release -a -u > /dev/null2>&1 lsb_release_exit_code=$? set -e
# Check if the command has exited successfully, it means we're in a forked distro if [ "$lsb_release_exit_code" = "0" ]; then # Print info about current distro cat <<-EOF You're using '$lsb_dist' version '$dist_version'. EOF # Get the upstream release info lsb_dist=$(lsb_release -a -u 2>&1 | tr '[:upper:]' '[:lower:]' | grep -E 'id' | cut -d ':' -f 2 | tr -d '[:space:]') dist_version=$(lsb_release -a -u 2>&1 | tr '[:upper:]' '[:lower:]' | grep -E 'codename' | cut -d ':' -f 2 | tr -d '[:space:]') # Print info about upstream distro cat <<-EOF Upstream release is '$lsb_dist' version '$dist_version'. EOF else if [ -r /etc/debian_version ] && [ "$lsb_dist" != "ubuntu" ] && [ "$lsb_dist" != "raspbian" ]; then if [ "$lsb_dist" = "osmc" ]; then # OSMC runs Raspbian lsb_dist=raspbian else # We'reDebiananddon't even know it! lsb_dist=debian fi dist_version="$(sed 's/\/.*//' /etc/debian_version | sed 's/\..*//')" case "$dist_version" in 9) dist_version="stretch" ;; 8|'KaliLinux2') dist_version="jessie" ;; 7) dist_version="wheezy" ;; esac fi fi fi } semverParse() { major="${1%%.*}" minor="${1#$major.}" minor="${minor%%.*}" patch="${1#$major.$minor.}" patch="${patch%%[-.]*}" } ee_notice() { echo echo echo " WARNING: $1 is now only supported by Docker EE" echo " Check https://store.docker.com for information on Docker EE" echo echo } do_install() { echo "# Executing docker install script, commit: $SCRIPT_COMMIT_SHA" if command_exists docker; then docker_version="$(docker -v | cut -d '' -f3 | cut -d ',' -f1)" MAJOR_W=1 MINOR_W=10 semverParse "$docker_version" shouldWarn=0 if [ "$major" -lt "$MAJOR_W" ]; then shouldWarn=1 fi if [ "$major" -le "$MAJOR_W" ] && [ "$minor" -lt "$MINOR_W" ]; then shouldWarn=1 fi cat >&2 <<-'EOF' Warning: the "docker" command appears to already exist on this system. If you already have Docker installed, this script can cause trouble, which is why we'redisplayingthiswarningandprovidetheopportunitytocancelthe installation.
YoumaypressCtrl+Cnowtoabortthisscript. EOF ( set -x; sleep20 ) fi
user="$(id -un 2>/dev/null || true)"
sh_c='sh -c' if [ "$user" != 'root' ]; then ifcommand_existssudo; then sh_c='sudo -E sh -c' elifcommand_existssu; then sh_c='su -c' else cat >&2 <<-'EOF' Error: thisinstallerneedstheabilitytoruncommandsasroot. Weareunabletofindeither"sudo"or"su"availabletomakethishappen. EOF exit1 fi fi
ifis_dry_run; then sh_c="echo" fi
# perform some very rudimentary platform detection lsb_dist=$( get_distribution ) lsb_dist="$(echo "$lsb_dist" | tr '[:upper:]' '[:lower:]')"
case"$lsb_dist"in
ubuntu) ifcommand_existslsb_release; then dist_version="$(lsb_release --codename | cut -f2)" fi if [ -z"$dist_version" ] && [ -r /etc/lsb-release ]; then dist_version="$(. /etc/lsb-release && echo "$DISTRIB_CODENAME")" fi ;;
centos) if [ -z"$dist_version" ] && [ -r /etc/os-release ]; then dist_version="$(. /etc/os-release && echo "$VERSION_ID")" fi ;;
rhel|ol|sles) ee_notice"$lsb_dist" exit1 ;;
*) ifcommand_existslsb_release; then dist_version="$(lsb_release --release | cut -f2)" fi if [ -z"$dist_version" ] && [ -r /etc/os-release ]; then dist_version="$(. /etc/os-release && echo "$VERSION_ID")" fi ;;
esac
# Check if this is a forked Linux distro check_forked
# Check if we actually support this configuration if ! echo"$SUPPORT_MAP" | grep"$(uname -m)-$lsb_dist-$dist_version" >/dev/null; then cat >&2 <<-'EOF'
# Run setup for each distro accordingly case"$lsb_dist"in ubuntu|debian|raspbian) pre_reqs="apt-transport-https ca-certificates curl" if [ "$lsb_dist" = "debian" ]; then if [ "$dist_version" = "wheezy" ]; then add_debian_backport_repo"$dist_version" fi # libseccomp2 does not exist for debian jessie main repos for aarch64 if [ "$(uname -m)" = "aarch64" ] && [ "$dist_version" = "jessie" ]; then add_debian_backport_repo"$dist_version" fi fi
# TODO: August 31, 2018 delete from here, if [ "$lsb_dist" = "ubuntu" ] && [ "$dist_version" = "artful" ]; then deprecation_notice"$lsb_dist$dist_version""August 31, 2018" fi # TODO: August 31, 2018 delete to here,
if ! command -vgpg > /dev/null; then pre_reqs="$pre_reqs gnupg" fi apt_repo="deb [arch=$(dpkg --print-architecture)] $DOWNLOAD_URL/linux/$lsb_dist$dist_version$CHANNEL" ( if ! is_dry_run; then set -x fi $sh_c'apt-get update -qq >/dev/null' $sh_c"apt-get install -y -qq $pre_reqs >/dev/null" $sh_c"curl -fsSL \"$DOWNLOAD_URL/linux/$lsb_dist/gpg\" | apt-key add -qq - >/dev/null" $sh_c"echo \"$apt_repo\" > /etc/apt/sources.list.d/docker.list" if [ "$lsb_dist" = "debian" ] && [ "$dist_version" = "wheezy" ]; then $sh_c'sed -i "/deb-src.*download\.docker/d" /etc/apt/sources.list.d/docker.list' fi $sh_c'apt-get update -qq >/dev/null' ) pkg_version="" if [ ! -z"$VERSION" ]; then ifis_dry_run; then echo"# WARNING: VERSION pinning is not supported in DRY_RUN" else # Will work for incomplete versions IE (17.12), but may not actually grab the "latest" if in the test channel pkg_pattern="$(echo "$VERSION" | sed "s/-ce-/~ce~.*/g" | sed "s/-/.*/g").*-0~$lsb_dist" search_command="apt-cache madison 'docker-ce' | grep '$pkg_pattern' | head -1 | cut -d' ' -f 4" pkg_version="$($sh_c "$search_command")" echo"INFO: Searching repository for VERSION '$VERSION'" echo"INFO: $search_command" if [ -z"$pkg_version" ]; then echo echo"ERROR: '$VERSION' not found amongst apt-cache madison results" echo exit1 fi pkg_version="=$pkg_version" fi fi ( if ! is_dry_run; then set -x fi $sh_c"apt-get install -y -qq --no-install-recommends docker-ce$pkg_version >/dev/null" ) echo_docker_as_nonroot exit0 ;; centos|fedora) yum_repo="$DOWNLOAD_URL/linux/$lsb_dist/docker-ce.repo" if [ "$lsb_dist" = "fedora" ]; then if [ "$dist_version" -lt"26" ]; then echo"Error: Only Fedora >=26 are supported" exit1 fi
pkg_manager="dnf" config_manager="dnf config-manager" enable_channel_flag="--set-enabled" pre_reqs="dnf-plugins-core" pkg_suffix="fc$dist_version" else pkg_manager="yum" config_manager="yum-config-manager" enable_channel_flag="--enable" pre_reqs="yum-utils" pkg_suffix="el" fi ( if ! is_dry_run; then set -x fi $sh_c"$pkg_manager install -y -q $pre_reqs" $sh_c"$config_manager --add-repo $yum_repo"
if [ "$CHANNEL" != "stable" ]; then $sh_c"$config_manager$enable_channel_flag docker-ce-$CHANNEL" fi $sh_c"$pkg_manager makecache" ) pkg_version="" if [ ! -z"$VERSION" ]; then ifis_dry_run; then echo"# WARNING: VERSION pinning is not supported in DRY_RUN" else pkg_pattern="$(echo "$VERSION" | sed "s/-ce-/\\\\.ce.*/g" | sed "s/-/.*/g").*$pkg_suffix" search_command="$pkg_manager list --showduplicates 'docker-ce' | grep '$pkg_pattern' | tail -1 | awk '{print \$2}'" pkg_version="$($sh_c "$search_command")" echo"INFO: Searching repository for VERSION '$VERSION'" echo"INFO: $search_command" if [ -z"$pkg_version" ]; then echo echo"ERROR: '$VERSION' not found amongst $pkg_manager list results" echo exit1 fi # Cut out the epoch and prefix with a '-' pkg_version="-$(echo "$pkg_version" | cut -d':' -f 2)" fi fi ( if ! is_dry_run; then set -x fi $sh_c"$pkg_manager install -y -q docker-ce$pkg_version" ) echo_docker_as_nonroot exit0 ;; esac exit1 } # wrapped up in a function so that we have some protection against only getting # half the file during "curl | sh" do_install
[root@ceshi-130 ~]# kubectl get pod -n infra NAME READY STATUS RESTARTS AGE jenkins-698b4994c8-hm5wf1/1 Running 05h21m [root@ceshi-130 ~]# kubectl exec -it jenkins-698b4994c8-hm5wf bash -n infra root@jenkins-698b4994c8-hm5wf:/# whoami root root@jenkins-698b4994c8-hm5wf:/# date Wed Aug 1816:33:53 CST 2021
测试以ssh连通性 root@jenkins-698b4994c8-hm5wf:/# ssh -i /root/.ssh/id_rsa -T git@gitee.com Hi 刘江旭! You've successfully authenticated, but GITEE.COM does not provide shell access. 测试harbor仓库连通性 root@jenkins-698b4994c8-hm5wf:/# docker login harbor.od.com Authenticating with existing credentials... WARNING! Your password will be stored unencrypted in /root/.docker/config.json. Login Succeeded
wechat
